skill-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (Phase 2: "Interview & Research") explicitly instructs the agent to use web_search and read_webpages_as_markdown to fetch and read web pages for research, and references/super-magic-tools.md documents tools (read_webpages_as_markdown, download_from_url, visual_understanding_webpage) that fetch arbitrary remote URLs, so the agent will ingest untrusted third‑party web content that can influence decisions.